Cry for help.

Jeff A. Earickson jaearick at COLBY.EDU
Mon Jan 13 17:18:55 GMT 2003


Sobig-A, in Sophos-speak.  Other anti-virus makers may have other
names for it.  Just add "big at boss.com" to your sendmail access file
to reject/discard these things.

--- Jeff

On Mon, 13 Jan 2003, Steve Ellis wrote:

> Date: Mon, 13 Jan 2003 12:06:40 -0500
> From: Steve Ellis <ellis at KAZAKCOMPOSITES.COM>
> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Cry for help.
>
> I'm curious as to what virus was being sent from thebig at boss.com
> address. We received a few messages, but they were not detected as a
> virus by the virus software we are using with MailScanner. Anyone have a
> name for it?
>
> Steve Ellis
> Sr Engineer
> KaZaK Composites, Inc.
> 781.932.5665
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of John B. Hanks
> Sent: Friday, January 10, 2003 7:50 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Cry for help.
>
> We are getting pounded by a (new?) virus that always sends from
> big at boss.com. Can someone tell me a quick and dirty way to start
> dropping
> all mail from this address? McAfee is not detecting it and I have added
> a
> block for .pif attachments, but would prefer to drop the mails
> altogether.
>
> Thanks
>
> jbh
>



More information about the MailScanner mailing list